Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1355fd-b728-440d-aaff-7822b3d480ab/1/fepUJh7bsE294g9qL7oDXEBl6b8.roa
File:                     fepUJh7bsE294g9qL7oDXEBl6b8.roa (raw, json)
Hash identifier:          EReXp6kb6/uTnoZv1sk1jzZ9X/7sP+PuLDgjjocIkn0=
Subject key identifier:   7D:EA:54:26:1E:DB:B0:4D:BD:E2:0F:6A:2F:BA:03:5C:40:65:E9:BF
Certificate issuer:       /CN=56f47cba0835c682cce12029a6ae3b3b95031b32
Certificate serial:       018A1F0A6DECB8B0BB55FC88AD304C4706B6
Authority key identifier: 56:F4:7C:BA:08:35:C6:82:CC:E1:20:29:A6:AE:3B:3B:95:03:1B:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvR8ugg1xoLM4SAppq47O5UDGzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/1355fd-b728-440d-aaff-7822b3d480ab/1/fepUJh7bsE294g9qL7oDXEBl6b8.roa
Signing time:             Tue 22 Aug 2023 20:58:11 +0000
ROA not before:           Tue 22 Aug 2023 20:58:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     136787
IP address blocks:        146.19.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:1f:0a:6d:ec:b8:b0:bb:55:fc:88:ad:30:4c:47:06:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f47cba0835c682cce12029a6ae3b3b95031b32
        Validity
            Not Before: Aug 22 20:58:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7dea54261edbb04dbde20f6a2fba035c4065e9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:fb:1f:65:1e:76:bd:e1:90:c9:b5:ee:0e:
                    10:47:a1:06:20:ae:7c:78:11:04:05:ae:b5:09:6c:
                    59:e4:99:d8:4e:6d:4c:d9:f3:51:40:a3:9d:25:68:
                    8d:7b:64:7c:2f:08:b1:dc:ed:e6:d0:34:35:29:f3:
                    72:55:ff:11:af:b6:43:5d:4b:8f:3b:9d:37:41:ba:
                    41:8e:9c:26:99:38:e2:64:af:18:2b:7b:76:f0:32:
                    23:1d:79:3f:3d:5d:78:1c:35:4d:ad:4a:7d:fa:9d:
                    5d:33:61:37:ba:01:d2:14:26:44:b1:8d:cc:78:92:
                    37:b9:ce:f2:2d:14:dc:4c:1a:26:f6:f2:50:ff:26:
                    96:11:d4:88:75:62:cb:76:34:7c:88:c8:b0:36:01:
                    1b:49:f7:cb:0a:fa:d1:cd:0c:13:e1:57:f2:94:fb:
                    ef:c8:d5:6c:19:12:69:4a:b5:85:71:d6:22:4c:f5:
                    fa:42:27:68:98:f8:09:f3:38:f0:08:7a:65:11:68:
                    a4:cf:dc:32:4f:17:95:55:65:77:75:ba:6d:23:24:
                    ac:9c:3c:8b:8a:df:4d:86:74:04:f9:88:0d:c7:4f:
                    b5:50:47:52:15:fd:87:43:ab:de:69:6d:d8:53:62:
                    5f:7b:3a:a1:b3:c2:79:b3:80:6e:de:3e:f9:03:32:
                    33:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EA:54:26:1E:DB:B0:4D:BD:E2:0F:6A:2F:BA:03:5C:40:65:E9:BF
            X509v3 Authority Key Identifier:
                keyid:56:F4:7C:BA:08:35:C6:82:CC:E1:20:29:A6:AE:3B:3B:95:03:1B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvR8ugg1xoLM4SAppq47O5UDGzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1355fd-b728-440d-aaff-7822b3d480ab/1/fepUJh7bsE294g9qL7oDXEBl6b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1355fd-b728-440d-aaff-7822b3d480ab/1/VvR8ugg1xoLM4SAppq47O5UDGzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:9f:b4:47:c5:e4:09:40:fe:c0:c6:7a:ff:c2:98:df:b2:7d:
         98:4d:76:c4:9c:52:37:04:22:47:cb:29:64:6f:24:f7:dd:7e:
         14:6b:6e:32:63:a0:de:f5:4e:69:a3:ec:52:d5:53:ca:88:41:
         6d:d7:4d:3c:b6:53:a6:75:c2:1f:be:3d:90:02:22:7c:3b:20:
         9e:c7:c7:7c:77:3d:eb:68:30:60:2c:2f:bd:29:fd:b7:ce:0e:
         d5:cb:76:24:34:bf:56:5f:45:ec:79:22:50:bb:6b:22:84:e7:
         ec:3f:b2:c0:c3:d7:31:81:1b:75:5e:bf:99:41:72:83:44:18:
         2d:ee:78:d0:6c:6c:60:cc:23:af:de:13:a1:d6:4e:3c:d6:b1:
         64:37:21:d1:68:a2:b5:b7:f4:fc:ed:21:ac:80:e3:69:01:e9:
         3a:bf:0a:1a:96:29:b1:58:40:54:de:4a:22:4b:97:f8:d1:e5:
         1a:f4:70:0f:f8:87:7e:da:5a:4c:e4:3e:7f:19:a4:8f:e9:0e:
         23:93:e9:6c:ac:c7:2d:d7:35:46:a5:71:87:25:56:aa:70:2f:
         c5:0b:d1:47:f8:35:18:20:1a:83:17:7d:32:3b:9d:b6:ab:0f:
         6a:81:69:b9:06:bb:d7:3d:2b:8a:27:d8:d0:ee:bf:c1:87:70:
         c4:3b:eb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:27 2024 by rpki-client on console-ams.rpki-client.org